|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Miss Matched SP versions
FWIW, I have to concur. 20 firewalls or 100 firewalls, you should provision to track which ones are on what and connect to each with its matching management client. That is, unless you want to risk running into something I hit: a firewall that accepted policy updates from a mismatched GUI client and started implementing the rules in a rather random and inconsistent fashion, with no clear explanation as to what it was doing or why (and no, the logs didn't help. We just had to reason out that the FW was being weird with no trail to make it obvious). -----Original Message----- From: Jim Parker [mailto:[email protected]] Sent: Friday, April 12, 2002 2:09 AM To: [email protected] Subject: Re: [FW-1] Miss Matched SP versions Ok find out the hard way... ----- Original Message ----- From: "Jarmoc, Jeff" <[email protected]> To: <[email protected]> Sent: Friday, April 12, 2002 3:53 AM Subject: Re: [FW-1] Miss Matched SP versions > That's not really entirely reasonable. Obviously you want to minimize > the amount of time you have mismatched service pack levels, but if > you're patching say... 20 firewalls, it may take a little while to > make the rounds > when you consider each upgrade will cause an outage. > > -----Original Message----- > From: Jim Parker [mailto:[email protected]] > Sent: Thursday, April 11, 2002 5:02 PM > To: [email protected] > Subject: Re: [FW-1] Miss Matched SP versions > > > don't do it, ever, checkpoint change the code of the binaries every release, > they're not just bug fixes. > > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:[email protected]]On Behalf Of > Russell Washington > Sent: 11 April 2002 20:02 > To: [email protected] > Subject: Re: [FW-1] Miss Matched SP versions > > > I've seen some odd policy malfunctions when the mgt client was at a *lower* > SP than the FW (but still apparently allowed by the FW to make changes > 'successfully'). > > -Russ > > -----Original Message----- > From: Holland, Stephen [mailto:[email protected]] > Sent: Thursday, April 11, 2002 8:54 AM > To: [email protected] > Subject: [FW-1] Miss Matched SP versions > > > Does anyone have experience or information with miss matched SP > versions in > a distributed environment? Mainly with the mgmt have a higher service pack. > > > > I know I have read from Checkpoint not to do it, but can not find that > information or why not to do it? > > --Stephen > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
